PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bf3183bfa1b61fc70a88c7911cc0f2de11c8dd0cfbf91b654db57c91e1b26c50.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf3183bfa1b61fc70a88c7911cc0f2de11c8dd0cfbf91b654db57c91e1b26c50.dll
Resource
win10v2004-20240802-en
Target
bf3183bfa1b61fc70a88c7911cc0f2de11c8dd0cfbf91b654db57c91e1b26c50
Size
3.5MB
MD5
61efd5ae1b763217da1046e01a268ddd
SHA1
9336ba9c808598df19c0c5148bb0620113b98c3f
SHA256
bf3183bfa1b61fc70a88c7911cc0f2de11c8dd0cfbf91b654db57c91e1b26c50
SHA512
bccd7b5b7047fd7efa04c5ff52c8c0aaedbeca96ffd36557c3a23459de888d69fecff3de2cb25cf06376587f599ddd1637d809691494f30ef13f5fa187b096ee
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zF:8QKotcTlBk9YwzEhPbYzjmMtccXk8KB
Checks for missing Authenticode signature.
resource |
---|
bf3183bfa1b61fc70a88c7911cc0f2de11c8dd0cfbf91b654db57c91e1b26c50 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ